{"id":"GHSA-wh77-3x4m-4q9g","summary":"Moderate severity vulnerability that affects bootstrap and bootstrap-sass","details":"In Bootstrap 4 before 4.3.1 and Bootstrap 3 before 3.4.1, XSS is possible in the tooltip or popover data-template attribute. For more information, see: https://blog.getbootstrap.com/2019/02/13/bootstrap-4-3-1-and-3-4-1/","modified":"2023-03-14T07:01:09.287376Z","published":"2019-02-22T20:54:27Z","withdrawn":"2023-03-14T07:01:09.287376Z","references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-wh77-3x4m-4q9g"}],"affected":[{"package":{"name":"bootstrap-sass","ecosystem":"npm","purl":"pkg:npm/bootstrap-sass"},"ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.4.1"}]}],"database_specific":{"cvss":{"score":0,"vectorString":null},"cwes":[],"ghsa":"https://github.com/advisories/GHSA-wh77-3x4m-4q9g","source":"https://github.com/github/advisory-database/blob/main/GHSA-wh77-3x4m-4q9g.json"}},{"package":{"name":"bootstrap","ecosystem":"npm","purl":"pkg:npm/bootstrap"},"ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.4.1"},{"introduced":"4.0.0"},{"fixed":"4.3.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/GHSA-wh77-3x4m-4q9g.json","cvss":{"score":0,"vectorString":null},"cwes":[],"ghsa":"https://github.com/advisories/GHSA-wh77-3x4m-4q9g"}}],"schema_version":"1.7.3"}